Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File:                     TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier:          1BzI+CdPCysWodTAfFjDZHq76EEdeNIycEgT3QdvcPs=
Subject key identifier:   EE:88:19:45:EE:2F:5E:DE:FE:31:6E:AF:A1:1E:40:28:18:6C:CD:60
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer:       /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial:       01936933CDE62ACC4B11682B47CE966E8CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 16:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:22 +0000
Files and hashes:         1: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: wvxBOVwlDa1iNSlQz+SE5su0xHVNZyp+s7ecVxv/AJk=)
                          2: bEFRv-g_XNIF8db9d2WHVhnLgr4.roa (hash: eJcWXJJhf/VFpWicP/YU1ybOan9K8EGTAsR0VMfLwro=)
                          3: qvdXNc_Ks9VAAxid9zEls1dl8bI.roa (hash: uSCYWwIWZ2nPvTcUNgmdfKbuxJnBBbTzBbFfxzn2fRE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:cd:e6:2a:cc:4b:11:68:2b:47:ce:96:6e:8c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
        Validity
            Not Before: Nov 26 16:00:22 2024 GMT
            Not After : Nov 27 16:00:22 2024 GMT
        Subject: CN=ee881945ee2f5edefe316eafa11e4028186ccd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:90:55:b4:5a:af:58:d9:21:a6:88:4c:e4:
                    78:44:08:4a:23:90:64:a3:43:08:70:6c:8f:55:c5:
                    f7:b8:c5:f3:97:18:a6:9c:50:88:5f:95:40:dc:2b:
                    df:6b:6c:8e:e8:3d:1b:e5:a9:de:29:df:72:08:d1:
                    74:7b:38:19:a2:f9:ed:8e:9b:b0:49:7a:b0:f1:47:
                    a1:1e:a6:0c:98:3f:f6:2a:3b:9f:f2:5e:b8:48:0d:
                    cf:9d:b2:be:fa:15:b3:a0:e0:e5:36:14:89:d2:14:
                    97:e7:fb:3b:12:dc:dc:32:87:7a:9e:ef:6c:a4:71:
                    e1:b2:2b:6d:15:b6:01:eb:b8:ef:99:ec:2b:ba:dc:
                    3e:82:81:ad:47:da:0e:fa:8a:7f:63:3a:1e:94:3e:
                    dd:bf:ea:91:ab:93:25:fe:39:27:db:d3:9f:97:1a:
                    88:08:30:1f:0f:bd:92:fa:aa:88:ec:fb:f9:63:da:
                    2e:f4:d9:07:8c:b7:d3:f5:c8:a8:82:41:da:2c:ab:
                    f5:ab:aa:06:3b:d8:3f:4d:fb:55:2f:6f:b9:9f:d3:
                    e9:f6:15:23:17:25:3e:56:33:4f:80:9d:19:f0:9c:
                    ab:02:de:57:13:6f:9a:66:d8:08:9c:3e:19:6c:2d:
                    fa:55:d1:e2:8c:ad:38:40:aa:b6:a4:ec:f4:e7:34:
                    98:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:88:19:45:EE:2F:5E:DE:FE:31:6E:AF:A1:1E:40:28:18:6C:CD:60
            X509v3 Authority Key Identifier:
                keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a4:11:cd:87:88:d8:60:66:2f:92:a8:b4:12:cf:cb:91:f6:
         c4:df:79:a0:ff:bf:f8:bc:7b:2d:00:51:28:31:79:89:54:d1:
         25:23:ab:03:7f:6b:ef:10:90:84:ff:55:8e:ca:48:39:88:03:
         4f:49:11:3b:53:36:b7:6d:48:b5:ca:77:46:e6:d8:f4:81:2e:
         10:e2:8b:aa:ed:24:08:dc:ff:d4:1f:d9:8e:6d:19:0a:ca:30:
         20:97:98:ca:cc:39:fa:f5:52:9a:32:0c:45:fd:f5:ad:c9:0a:
         62:d2:40:d6:23:5c:64:b5:96:0e:82:44:76:64:f4:52:6e:d3:
         72:e9:c9:b3:6f:d2:a3:53:0c:ca:bb:11:e6:dc:43:a1:6d:e7:
         fb:98:f1:a1:3c:9d:d3:65:6b:cb:28:7e:fc:ed:6c:0a:60:82:
         e8:1a:2b:da:94:da:6b:09:d4:12:09:f7:1c:97:40:1f:bc:3f:
         6a:10:f4:3a:cd:ee:6e:3a:0f:a4:8c:dc:30:c8:da:3c:9f:99:
         55:f6:46:c1:52:7c:f5:d4:11:9a:d0:e8:6d:09:24:01:ea:31:
         02:c6:ad:7c:de:3b:b7:10:bf:ae:34:5e:4b:98:7e:2b:e8:95:
         de:6a:bb:d3:af:a0:e8:46:83:ce:73:f4:65:89:b4:7e:70:97:
         d0:7e:0f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----